chore(deps): update build

konflux-ci · Jan 9, 2025 · 7e669b5 · 7e669b5
1 parent a07704d
commit 7e669b5
Show file tree

Hide file tree

Showing 26 changed files with 40 additions and 40 deletions.
diff --git a/task/apply-tags/0.1/apply-tags.yaml b/task/apply-tags/0.1/apply-tags.yaml
@@ -34,7 +34,7 @@ spec:
         readOnly: true
   steps:
     - name: apply-additional-tags-from-parameter
-      image: registry.access.redhat.com/ubi9/skopeo:9.5-1734513455@sha256:ed14fc6a175289cc72ffb122ebc02db0e7f448a2ed6169472347aaeb0c12c373
+      image: registry.access.redhat.com/ubi9/skopeo:9.5-1736426934@sha256:95f1267a84f36b47d3103b8ff57ec8555d1e95f0fa269a902b5652bf0fd2dc69
       args:
         - $(params.ADDITIONAL_TAGS[*])
       env:
@@ -54,7 +54,7 @@ spec:
         fi
 
     - name: apply-additional-tags-from-image-label
-      image: registry.access.redhat.com/ubi9/skopeo:9.5-1734513455@sha256:ed14fc6a175289cc72ffb122ebc02db0e7f448a2ed6169472347aaeb0c12c373
+      image: registry.access.redhat.com/ubi9/skopeo:9.5-1736426934@sha256:95f1267a84f36b47d3103b8ff57ec8555d1e95f0fa269a902b5652bf0fd2dc69
       env:
       - name: IMAGE
         value: $(params.IMAGE)

diff --git a/task/build-image-index/0.1/build-image-index.yaml b/task/build-image-index/0.1/build-image-index.yaml
@@ -163,7 +163,7 @@ spec:
         add:
           - SETFCAP
 
-  - image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+  - image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     name: create-sbom
     computeResources:
       limits:

diff --git a/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml
@@ -456,7 +456,7 @@ spec:
       securityContext:
         runAsUser: 0
     - name: merge-syft-sboms
-      image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+      image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
       workingDir: /var/workdir
       script: |
         #!/bin/python3
@@ -503,7 +503,7 @@ spec:
       securityContext:
         runAsUser: 0
     - name: create-purl-sbom
-      image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+      image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
       workingDir: /var/workdir
       script: |
         #!/bin/python3

diff --git a/task/buildah-oci-ta/0.2/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.2/buildah-oci-ta.yaml
@@ -575,7 +575,7 @@ spec:
           add:
             - SETFCAP
     - name: icm
-      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
       workingDir: /var/workdir
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -683,7 +683,7 @@ spec:
       securityContext:
         runAsUser: 0
     - name: prepare-sboms
-      image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+      image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
       workingDir: /var/workdir
       script: |
         if [ "${SKIP_SBOM_GENERATION}" = "true" ]; then

diff --git a/task/buildah-oci-ta/0.3/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.3/buildah-oci-ta.yaml
@@ -563,7 +563,7 @@ spec:
           add:
             - SETFCAP
     - name: icm
-      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
       workingDir: /var/workdir
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -648,7 +648,7 @@ spec:
         echo "Running syft on the image filesystem"
         syft dir:"$(cat /shared/container_path)" --output cyclonedx-json="/var/workdir/sbom-image.json"
     - name: prepare-sboms
-      image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+      image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
       workingDir: /var/workdir
       script: |
         if [ "${SKIP_SBOM_GENERATION}" = "true" ]; then

diff --git a/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml
@@ -554,7 +554,7 @@ spec:
     - mountPath: /shared
       name: shared
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     name: merge-syft-sboms
     script: |
       #!/bin/python3
@@ -603,7 +603,7 @@ spec:
       runAsUser: 0
     workingDir: /var/workdir
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     name: create-purl-sbom
     script: |
       #!/bin/python3

diff --git a/task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml
@@ -683,7 +683,7 @@ spec:
       readOnly: true
     workingDir: /var/workdir
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -820,7 +820,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     name: prepare-sboms
     script: |
       #!/bin/bash

diff --git a/task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml
@@ -671,7 +671,7 @@ spec:
       readOnly: true
     workingDir: /var/workdir
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -779,7 +779,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     name: prepare-sboms
     script: |
       #!/bin/bash

diff --git a/task/buildah-remote/0.1/buildah-remote.yaml b/task/buildah-remote/0.1/buildah-remote.yaml
@@ -547,7 +547,7 @@ spec:
     - mountPath: /shared
       name: shared
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     name: merge-syft-sboms
     script: |
       #!/bin/python3
@@ -596,7 +596,7 @@ spec:
       runAsUser: 0
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     name: create-purl-sbom
     script: |
       #!/bin/python3

diff --git a/task/buildah-remote/0.2/buildah-remote.yaml b/task/buildah-remote/0.2/buildah-remote.yaml
@@ -659,7 +659,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -798,7 +798,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     name: prepare-sboms
     script: |
       #!/bin/bash

diff --git a/task/buildah-remote/0.3/buildah-remote.yaml b/task/buildah-remote/0.3/buildah-remote.yaml
@@ -647,7 +647,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -757,7 +757,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     name: prepare-sboms
     script: |
       #!/bin/bash

diff --git a/task/buildah-rhtap/0.1/buildah-rhtap.yaml b/task/buildah-rhtap/0.1/buildah-rhtap.yaml
@@ -144,7 +144,7 @@ spec:
       name: tmpfiles
 
   - name: merge-sboms
-    image: registry.access.redhat.com/ubi8/python-311@sha256:e61de96a78dc883686a8b6f5ce27e00342801947cad48207ea7cf9cf06da1f1e
+    image: registry.access.redhat.com/ubi8/python-311@sha256:ed5206776ac1e41e553fc6d0bedec4b4f471674b6fb3c1844fd95be97e728113
     env:
       - name: RESULT_PATH
         value: $(results.SBOM_BLOB_URL.path)

diff --git a/task/buildah/0.1/buildah.yaml b/task/buildah/0.1/buildah.yaml
@@ -415,7 +415,7 @@ spec:
       runAsUser: 0
 
   - name: merge-syft-sboms
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     script: |
       #!/bin/python3
       import json
@@ -464,7 +464,7 @@ spec:
       runAsUser: 0
 
   - name: create-purl-sbom
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
     script: |
       #!/bin/python3
       import json

diff --git a/task/buildah/0.2/buildah.yaml b/task/buildah/0.2/buildah.yaml
@@ -512,7 +512,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - name: icm
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     securityContext:
       capabilities:
         add:
@@ -627,7 +627,7 @@ spec:
       runAsUser: 0
 
   - name: prepare-sboms
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     computeResources:
       limits:
         memory: 512Mi

diff --git a/task/buildah/0.3/buildah.yaml b/task/buildah/0.3/buildah.yaml
@@ -501,7 +501,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - name: icm
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     securityContext:
       capabilities:
         add:
@@ -593,7 +593,7 @@ spec:
       name: shared
 
   - name: prepare-sboms
-    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:9f1fd11d9c3c517ecc112d192ad361d16ecf6ce00b83b109c93cf3d1c644a357
+    image: quay.io/redhat-appstudio/sbom-utility-scripts-image@sha256:608c719f163b98410b3f96e1c42232d064445857fb90144ccf73b9b677b29db5
     computeResources:
       limits:
         memory: 512Mi

diff --git a/task/generate-labels/0.1/generate-labels.yaml b/task/generate-labels/0.1/generate-labels.yaml
@@ -38,7 +38,7 @@ spec:
       type: array
   steps:
     - name: render
-      image: quay.io/konflux-ci/yq:latest@sha256:99fb3254efcfd6a96977bcda12b4b74b872831f524e02938f9fa0d4ae797ffe2
+      image: quay.io/konflux-ci/yq:latest@sha256:b78d51863d5d9120c107152fae617f9abc8dba108ddfe420bf60708a2dc52c00
       env:
       - name: SOURCE_DATE_EPOCH
         value: "$(params.source-date-epoch)"

diff --git a/task/init/0.2/init.yaml b/task/init/0.2/init.yaml
@@ -25,7 +25,7 @@ spec:
 
   steps:
     - name: init
-      image: registry.access.redhat.com/ubi9/skopeo:9.5-1734513455@sha256:ed14fc6a175289cc72ffb122ebc02db0e7f448a2ed6169472347aaeb0c12c373
+      image: registry.access.redhat.com/ubi9/skopeo:9.5-1736426934@sha256:95f1267a84f36b47d3103b8ff57ec8555d1e95f0fa269a902b5652bf0fd2dc69
       env:
         - name: IMAGE_URL
           value: $(params.image-url)

diff --git a/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml b/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml
@@ -128,7 +128,7 @@ spec:
         name: workdir
   steps:
     - name: skip-ta
-      image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1734497536@sha256:94b434a29a894129301f6ff52dbddb19422fc800a109170c634b056da8cd704f
+      image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1736404155@sha256:e408de45e95eed0539fe821d31aa4288fe430d94f09a24c13c567bf99044dace
       env:
         - name: INPUT
           value: $(params.input)
@@ -149,7 +149,7 @@ spec:
         - use
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
     - name: sanitize-cachi2-config-file-with-yq
-      image: quay.io/konflux-ci/yq:latest@sha256:99fb3254efcfd6a96977bcda12b4b74b872831f524e02938f9fa0d4ae797ffe2
+      image: quay.io/konflux-ci/yq:latest@sha256:b78d51863d5d9120c107152fae617f9abc8dba108ddfe420bf60708a2dc52c00
       script: |
         if [ -n "${CONFIG_FILE_CONTENT}" ]; then
           # we need to drop 'goproxy_url' for safety reasons until cachi2 decides what the SBOM

diff --git a/task/prefetch-dependencies-oci-ta/0.1/recipe.yaml b/task/prefetch-dependencies-oci-ta/0.1/recipe.yaml
@@ -7,7 +7,7 @@ add:
 additionalSteps:
   - at: 0
     name: skip-ta
-    image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1734497536@sha256:94b434a29a894129301f6ff52dbddb19422fc800a109170c634b056da8cd704f
+    image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1736404155@sha256:e408de45e95eed0539fe821d31aa4288fe430d94f09a24c13c567bf99044dace
     env:
     - name: INPUT
       value: $(params.input)

diff --git a/task/prefetch-dependencies/0.1/prefetch-dependencies.yaml b/task/prefetch-dependencies/0.1/prefetch-dependencies.yaml
@@ -69,7 +69,7 @@ spec:
         name: shared
   steps:
   - name: sanitize-cachi2-config-file-with-yq
-    image: quay.io/konflux-ci/yq:latest@sha256:99fb3254efcfd6a96977bcda12b4b74b872831f524e02938f9fa0d4ae797ffe2
+    image: quay.io/konflux-ci/yq:latest@sha256:b78d51863d5d9120c107152fae617f9abc8dba108ddfe420bf60708a2dc52c00
     script: |
       if [ -n "${CONFIG_FILE_CONTENT}" ]
       then

diff --git a/task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml b/task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml
@@ -58,7 +58,7 @@ spec:
         - use
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
     - name: push
-      image: quay.io/konflux-ci/oras:latest@sha256:d164490b5cbd38dcd819898cd3f5b73b64d2e3334cb2ddc728f49945207e2706
+      image: quay.io/konflux-ci/oras:latest@sha256:b118bceefe8110d1965742ef4818fb51d2da4493c40ad99107a09b30f5c353f8
       workingDir: /var/workdir
       env:
         - name: IMAGE

diff --git a/task/push-dockerfile/0.1/push-dockerfile.yaml b/task/push-dockerfile/0.1/push-dockerfile.yaml
@@ -39,7 +39,7 @@ spec:
     description: Digest-pinned image reference to the Dockerfile image.
   steps:
   - name: push
-    image: quay.io/konflux-ci/oras:latest@sha256:d164490b5cbd38dcd819898cd3f5b73b64d2e3334cb2ddc728f49945207e2706
+    image: quay.io/konflux-ci/oras:latest@sha256:b118bceefe8110d1965742ef4818fb51d2da4493c40ad99107a09b30f5c353f8
     workingDir: $(workspaces.workspace.path)
     env:
     - name: IMAGE

diff --git a/task/source-build-oci-ta/0.1/source-build-oci-ta.yaml b/task/source-build-oci-ta/0.1/source-build-oci-ta.yaml
@@ -114,7 +114,7 @@ spec:
             | .name + "@" + $matched.digest
         ' <<<"$sbom" | tee "$BASE_IMAGES_FILE"
     - name: build
-      image: quay.io/konflux-ci/source-container-build:latest@sha256:4002c18472e33b5f3d2b92e7897b0b31e4181dd5f8b8a3c4097937035e899ba3
+      image: quay.io/konflux-ci/source-container-build:latest@sha256:b4757a757be5e27e830f6c79062d6f4b37d0c3ad0deae3dba506f9287d1219d0
       workingDir: /var/workdir
       env:
         - name: SOURCE_DIR

diff --git a/task/source-build/0.1/source-build.yaml b/task/source-build/0.1/source-build.yaml
@@ -102,7 +102,7 @@ spec:
         ' <<< "$sbom" | tee "$BASE_IMAGES_FILE"
 
     - name: build
-      image: quay.io/konflux-ci/source-container-build:latest@sha256:4002c18472e33b5f3d2b92e7897b0b31e4181dd5f8b8a3c4097937035e899ba3
+      image: quay.io/konflux-ci/source-container-build:latest@sha256:b4757a757be5e27e830f6c79062d6f4b37d0c3ad0deae3dba506f9287d1219d0
       # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
       # the cluster will set imagePullPolicy to IfNotPresent
       computeResources:

diff --git a/task/summary/0.1/summary.yaml b/task/summary/0.1/summary.yaml
@@ -23,7 +23,7 @@ spec:
       default: Succeeded
   steps:
     - name: appstudio-summary
-      image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1734497536@sha256:94b434a29a894129301f6ff52dbddb19422fc800a109170c634b056da8cd704f
+      image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1736404155@sha256:e408de45e95eed0539fe821d31aa4288fe430d94f09a24c13c567bf99044dace
       # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
       # the cluster will set imagePullPolicy to IfNotPresent
       env:

diff --git a/task/update-infra-deployments/0.1/update-infra-deployments.yaml b/task/update-infra-deployments/0.1/update-infra-deployments.yaml
@@ -109,7 +109,7 @@ spec:
 
       # Based on https://github.com/tektoncd/catalog/tree/main/task/github-app-token/0.2/
     - name: create-mr
-      image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+      image: registry.access.redhat.com/ubi9/python-39:9.5-1736339716@sha256:9c3fbaa5af85700cd2a1c298332d8c7edbf7cca02f02b3977bf67752f141044b
       # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
       # the cluster will set imagePullPolicy to IfNotPresent
       volumeMounts: